topic Re: Distributed Search Configuration in Deployment Architecture

Distributed Search Configuration

jthairu_splunk — Mon, 04 Dec 2017 14:58:56 GMT

I am trying to configure my search head to search my indexer and i keep receiving the following error:

Error while sending public key to search peer: Connect Timeout

One of the troubleshooting steps recommended was to make sure that splunkd is running with it is both on the SH and indexer.

Does anyone know what else I can try?

Thanks

harsmarvania57 — Mon, 04 Dec 2017 15:25:00 GMT

Are you able to connect Indexer management port from Search Head server?

Check using command telnet indexer 8089 if you are using linux

jthairu_splunk — Mon, 04 Dec 2017 15:45:12 GMT

when I run the telnet command I get the following:

telnet: indexer: Name or service not known
indexer: Unknown host

harsmarvania57 — Mon, 04 Dec 2017 15:47:50 GMT

Ah, replace indexer with your indexer IP address so for example telnet 192.168.1.1 8089

jthairu_splunk — Mon, 04 Dec 2017 15:52:54 GMT

ok, I did that and the connection timed out

harsmarvania57 — Mon, 04 Dec 2017 15:54:38 GMT

Means there is communication problem between your Search Head and Indexer. Possible causes are firewall blocking, route problem etc.